Privacy & Cookie Policy
Who are we?
We are IMIN Ltd, a company incorporated and registered in England and Wales with registered office address 124 City Road, London, England, EC1V 2NX and company number 07716450. Where we decide the means or purpose of processing your personal data, we are the data “controller”.
What’s this policy about?
This policy explains how we process your personal data as a data controller. We update this policy from time to time so please check back in.
The policy applies to use of imin.co and your interaction with us in relation to our services (together the “Services”).
We process personal data for our clients. Where we do so, they are the data controller, and we are a data processor. For example, if you book a leisure activity with one of our clients, they may use our platform to facilitate your booking. Please refer to the privacy policy of the relevant supplier or other third party for information about how they use your personal data. We only process data on their instructions.
How do you contact us?
If you have questions about this policy or want to exercise your rights, including privacy queries, please get in touch via our contact form.
If we can’t resolve your issue, you can also get in touch with the Information Commissioner’s Office in the UK at: https://ico.org.uk/concerns. (Or if you live outside the UK in a European country, you can submit a complaint to the supervisory authority in your country).
What are your rights?
You have the following rights, although these rights may be limited in some circumstances:
- Ask us to send a copy of your data to you or someone else
- Ask us to restrict, stop processing, or delete your data
- Object to our processing of your data
- Object to use of your personal data for direct marketing
- Ask us to correct inaccuracies
If we rely on consent to process data, or send direct marketing, you can withdraw consent by contacting us via our contact form.
1. Your personal data and how we use it
| Your data | How we use it | Sources and recipients |
|---|---|---|
|
Enquiry data (information we receive when you get in touch with questions or instructions) including:
6 years from when our relationship with you ends. |
We process this information to respond to your enquiries. Legal basisWe process this information in accordance with the terms of our contract with you (where we need this information to provide our Services to you) or to take steps at your request prior to entering into a contract. We also use this to pursue our legitimate interests in responding to enquiries, and in order to understand our customers and improve our Services. More informationYou may be required to provide us with certain information in order for us to respond to your enquiries. |
Sources
We collect this information from you. RecipientsWe use Zendesk, based in USA, to help manage our enquiries. |
|
Customer data (information we receive when you register or use our Services or when we obtain feedback from you) including:
6 years from when our relationship with you ends. |
We process this information to provide our Services. Legal basisWe process this information in accordance with the terms of our contract with you in order to enable you to login to and use our Services. We also use this to pursue our legitimate interests in obtaining feedback from you to understand market trends, our customers, how they use our Services, and to improve our Services, and to monitor compliance with our terms of service (for example, we may ask you to complete a survey or leave a review, and use responses for those purposes). More informationYou may be required to provide us with certain information in order for us to provide our Services. |
Sources
We collect this information from you. RecipientsWe use Zendesk, based in USA, to help manage our enquiries. |
|
Mailing lists Your name and email address and mailing list preferences. How long we keep itUntil you indicate that you no longer wish to receive our marketing emails. |
Where we have your consent or you have opted-in, we will send you emails with news about our company and services. Legal basisConsent; or “Soft opt-in” or B2B: In some instances (such as with existing customers, or if you are a corporate subscriber) the law may permit us to process your personal data to send you marketing by email that we think is of interest on the basis of our legitimate interests, being our legitimate interest in promoting our business. More informationIf you would like to be removed from marketing lists please let us know by clicking unsubscribe at the bottom of any marketing email you receive. |
Sources
We collect this data from you if you decide to sign-up. RecipientsWe use Zendesk to help manage our email lists. |
|
Analytics (information about how users interact with our Services which might be associated with a unique identifier) including:
After 26 months underlying data is deleted, but we may retain some anonymous, aggregated statistics generated from that data. |
Where we have your consent, we use a third party service (Google Analytics) to collect information about visitors to our website, to understand how many people visit, where they come from, and how they interact with our Services, and to help us improve and maintain our Services and address bugs. Legal basisTo the extent that our analytics involve storing or accessing information on your device other than as strictly necessary for us to provide our Service to you, we obtain your prior consent. Otherwise, we process this information, to the extent it is personal data, on the basis of our legitimate interests in understanding how you use our Services, and to improve those Services. More informationYou can find out more about how Google uses data by visiting policies.google.com/technologies/partner-sites. You can withdraw your consent at any time by contacting us, or in the case of Google Analytics, opting-out using the following link: Google Analytics opt-out. |
Sources
We use Shopify and Google’s services to collect this data from you when you visit our Services. RecipientsGoogle in the USA collect and process analytics data on our behalf. |
| Where explicit retention periods are not described above, we hold data for as long as necessary bearing in mind the purpose for which it was collected. At the end of the retention period, we assess whether it is necessary to continue to retain information to achieve the purposes for which it was collected. To determine appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of unauthorised access, and legal requirements. | ||
2. Our role as a processor
As mentioned above, we often process personal data about individuals as a data processor on behalf of the data controllers who are our clients (e.g. leisure activity suppliers and booking websites) who use our Services to facilitate their own operations. So, we may process personal data relating to individuals as a processor to process booking of leisure activities, to facilitate payment, and to record past and future bookings, transactions and communications relating to the foregoing.
We use Stripe Payments Europe, Ltd as a payment processor for these purposes. You can find their privacy policy online here https://stripe.com/en-gb/privacy.
The leisure activity providers, and booking websites/services and brokers, who are our clients, determine how & why data is processed for those purposes. If you have queries, please get in touch with the site or service who originally collected your personal data.
3. Cookies, analytics and similar technologies
Cookies, pixels and other technologies store and access data on your device to help websites and apps work. For each cookie, the tables below explain their purpose and how long they last. We get your consent to use them unless they’re essential for our sites, apps or services. You can change your cookie preferences any time by clicking the “Cookie Preferences” link at the bottom of every page; this will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.
Most browsers allow control over cookies, for more information: Google Chrome | Microsoft Edge | Mozilla Firefox | Opera | Apple Safari.
4. Storage, transfers and disclosure
Storage and Transfers
Save where indicated otherwise, your personal data is securely stored in the UK. We use certain sub-processors to help us operate our service. A list of the sub-processors we use from time to time can be found on our sub-processors page.
Where we use data processors outside the UK and European Economic Area, and transfer personal data to a country which does not provide an adequate level of protection, we use contracts or other safeguards which give personal data the same or equivalent protection it has in Europe or the UK. For more information drop us a line via our contact form.
Disclosure
We may disclose your personal data:
- Where required by law, government, competent authorities or the courts or to establish, exercise or defend our legal rights, and for the purposes of preventing crime and fraud (for example, we may share personal data with our professional advisors, investigators, or credit reference agencies).
- With members of our corporate group, insurers, advisers, suppliers and subcontractors, as necessary for the purposes set out in this policy.
- With our service providers and subcontractors, provided that they only use that personal data on our instructions and not for their own independent purposes.
- If involved in an investment, merger, acquisition, or sale of our organisation or assets, personal data we hold may be shared on the basis of the legitimate interests of us, our shareholders, customers and other parties to a transaction, unless those interests are outweighed by prejudicial impacts upon you.